Unit 42 warns retailers of ransomware, extortion and DDoS
As of September 30, 2026, operators had claimed 565 retail victims, with median revenue about $22 million.
34
- Mentions · 7d1
- Mentions · 30d2
- All mentions3
- First seenAug 19, 2026
- Last mentioned2d ago
Timeline
3 articles · newest firstRansomware has a new target. Is your backup ready?
ALPHV, BlackMatter, and Gunra have wiped backups before encryption to raise ransom pressure.
46
Change Healthcare Cyber
Change Healthcare's ransomware attack disrupted US healthcare payments and exposed data of roughly 190 million people.
65
Appears with
- Change Healthcarevictim · 2
- Akirathreat actor · 2
- BlackCatthreat actor · 2
- BlackCatmalware · 1
- CL0Pthreat actor · 1
- UnitedHealthorganization · 1
- Crystal Valleyvictim · 1
- The Gentlementhreat actor · 1
- Gunramalware · 1
- NEW Cooperativevictim · 1
- BlackMattermalware · 1
- CISAorganization · 1
- DDoSiamalware · 1
- BlackMatterthreat actor · 1
- Akiramalware · 1
- UnitedHealth Groupvictim · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.